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DETAILED ACTION 

1 . Claims 1-20 are presented for examination. 

Response to Arguments 

2. Applicant's arguments with respect to claims 1 , 8 and 15 have been 
considered but are moot in view of the new ground(s) of rejection. 



Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 1 03(a) which forms the 
basis for all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: (a) A patent may not be obtained 
though the invention is not identically disclosed or described as set forth in section 102 of 
this title, if the differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains. Patentability shall not be negatived by the manner in which the invention 
was made. 6. The factual inquiries set forth in Graham v. John Deere Co,, 383 U.S. 1,148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 1. Determining the scope 
and contents of the prior art. 2. Ascertaining the differences between the prior art and the 
claims at issue. 3. Resolving the level of ordinary skill in the pertinent art. 4. Considering 
objective evidence present in the application indicating obviousness or nonobviousness. 



4. Claims 1-20 are rejected under 35 U.S.C. § 103 (a) as being 

unpatentable over Win et al. (hereinafter Win) U.S. Patent No. 6,453,353, in view 
of Hellbusch et al. (Hellbusch) U.S. Patent No. 7,231,4333. 
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5. As to claim 1, Win teaclies tlie invention as claimed, including a 
method for integrating security and user account data in a reporting system with 
at least one remote repository comprising the steps of: 

enabling a user to submit user credential input to a reporting system 
(figure 1, col. 5, lines 12-20, col. 6, lines 20-40 -receiving user registers/log-in to 
tlie system/central repository/registry repository at a registry server); 

identifying an authentication process (figure 1, col. 6, lines 41 -col. 7, line 
6) from a plurality of authentication process comprising a standard-mode 
authentication (fig. 5A, col. 9, lines 41-60), pass-through authentication (col. 6, 
line 10-col. 7, line 6, col. 12, line 10-53 -Registry server using Autlientication 
server module to autlienticate user via Registry Repository (i.e., database), and 
anonymous authentication (col. 8, line 5-col. 9, line ^2 -Autlienticate and permit 
user to access to certain source based on user role); 

forwarding the user credential input to a first server (figures 1 , 3, 5, col. 8, 
line 5-col. 10, line 33 -forwarding to access server 106 for authentication); and 

enabling the first server to apply the authentication process to authenticate 
the user against a remote repository using Open Database Connectivity (ODBC) 
{i.e.. Register Repository) for verifying the user credential input (figures 1, 3, 5, 
col. 6, lines 41 -col. 7, line 67 -the access server 106 authenticates/verifies user 
name/password with Registry sever 108 ) and to determine user access control 
data for identifying at least one user privilege for performing one or more actions 
and at least one user permission associated with one or more objects (abstract, 
col. 5, line 66-col. 6, line 17, col. 8, lines 5-23, col. 11, lines 42-64 -providing 
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user a personalized menu that displays only resources tliat user lias a riglit to 
access according to user's profile, including user's role and privileges), wherein 
tlie remote repository is located witliin a second server, tlie second server being 
different from tlie first server (figure 1, col. 6, lines 20-26 and 41-54 - tlie registry 
repository 110 at tlie registry server 108 tliat stores user information, resources, 
users' role tliat can be used by access server 106 to authorize user's privileges 
and wherein the access server 106 and registry server 108 are different). 

However, Win does not explicitly teach wherein the reporting system 
comprises an On-Line Analytical Processing (OLAP) decision support system 
(DSS). 

Hellbusch teaches the reporting system comprises an On-Line Analytical 
Processing (OLAP) decision support system (DSS) (col. 5, lines 26-37). 

It would have been obvious to one of ordinary skill in the Data Processing 
art at the time of the invention was made to modify the teachings of Win to 
include OLAP decision support system as disclosed by Hellbusch in order to 
provide a useful architecture that interconnects applications of multiple 
enterprises into a single federated system. 

6. As to claim 2, Win teaches the invention as claimed, further 
comprising a step of importing user information from the remote repository (figure 
1 , col. 5, lines 1 2-20, col. 6, lines 20-26, col. 7, lines 45-57). 
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7. As to claim 3, Win teaclies tlie invention as claimed, wherein the 
authentication process comprises Lightweight Directory Access Protocol (col. 12, 
lines 10-53). 

8. As to claim 4, Win teaches the invention as claimed, wherein the 
authentication process comprises an operating system authentication (figures 1, 
3, 5, col. 6, lines 41-col. 7, line 67). 

9. As to claim 5, Win teaches the invention as claimed, further 
comprising a step of enabling the server to synchronize user account data with 
the user information from the remote repository (col. 7, lines 34-67, col. 19, line 
50-col. 20, line 53). 

1 0. As to claim 6, Win teaches wherein the user is associated with a 
group of users wherein group information from the remote repository is imported 
(figure 1, col. 5, lines 12-20, col. 6, lines 20-26, col. 7, lines 45-57). 

11. As to claim 7, Win teaches the invention as claimed, wherein the 
user information comprises at least one or user permissions, privileges and 
access rights associated with the user (abstract, col. 5, line 66-col. 6, line 17, col. 
8, lines 5-23, col. 1 1 , lines 42-64). 
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12. As to claim 8, Win teaclies tlie invention as claimed, including a 
system for integrating security and user account data in a reporting system with 
at least one remote repository, comprising: 

an input for enabling a user to submit user credential input to a reporting 
system (figure 1 , col. 5, lines 12-20, col. 6, lines 20-40 -receiving user 
registers/log-in to tlie system/central repository); 

an identification module for identifying an authentication process (figure 1, 
col. 6, lines 41 -col. 7, line 6) from a plurality of authentication process comprising 
a standard-mode authentication (fig. 5A, col. 9, lines 41-60), pass-through 
authentication (col. 6, line 10-col. 7, line 6, col. 12, line 10-53 -Registry server 
using Autlientication sen/er module to autlienticate user via Registry Repository 
(i.e., database), and anonymous authentication (col. 8, line 5-col. 9, line 12 - 
Autlienticate and permit user to access to certain source based on user role); 

a forwarding module for forwarding the user credential input to a first 
server (figures 1 , 3, 5, col. 8, line 5-col. 10, line 33 -forwarding to access sen/er 
106 for authentication); and 

a first server for applying the authentication process to authenticate the 
user against a remote repository using Open Database Connectivity (ODBC) 
{i.e.. Register Repository) for verifying the user credential input (figures 1, 3, 5, 
col. 6, lines 41 -col. 7, line 67 -the access server 106 authenticates/verifies user 
name/password with Registry sever 108) and to determine user access control 
data for identifying at least one user privilege for performing one or more actions 
and at least one user permission associated with one or more objects (abstract. 
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col. 5, line 66-col. 6, line 17, col. 8, lines 5-23, col. 11, lines 42-64 -providing 
user a personalized menu tliat displays only resources that user has a right to 
access according to user's profile, including user's role and privileges), wherein 
the remote repository is located within a second server, the second server being 
different from the first server (figure 1, col. 6, lines 20-26 and 41-54 - the registry 
repository 110 at the registry server 108 that stores user information, resources, 
users' role that can be used by access server 106 to authorize user's privileges 
and wherein the access server 106 and registry server 108 are different). 
However, Win does not explicitly teach wherein the reporting system comprises 
an On-Line Analytical Processing (OLAP) decision support system (DSS). 

Hellbusch teaches the reporting system comprises an On-Line Analytical 
Processing (OLAP) decision support system (DSS) (col. 5, lines 26-37). 

It would have been obvious to one of ordinary skill in the Data Processing 
art at the time of the invention was made to modify the teachings of Win to 
include OLAP decision support system as disclosed by Hellbusch in order to 
provide a useful architecture that interconnects applications of multiple 
enterprises into a single federated system. 

13. As to claim 9, Win teaches the invention as claimed, further 
comprising an import module for importing user information from the remote 
repository (figure 1, col. 5, lines 12-20, col. 6, lines 20-26, col. 7, lines 45-57). 
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14. As to claim 10, Win teaclies tlie invention as claimed, wherein the 
authentication process comprises Lightweight Directory Access Protocol (col. 12, 
lines 10-53). 

1 5. As to claim 1 1 , Win teaches the invention as claimed, wherein the 
authentication process comprises an operating system authentication (figures 1, 
3, 5, col. 6, lines 41-col. 7, line 67). 

16. As to claim 12, Win teaches the invention as claimed, wherein the 
server synchronizes user account data with the user information from the remote 
repository (col. 7, lines 34-67, col. 19, line 50-col. 20, line 53). 

17. As to claim 13, Win teaches wherein the user is associated with a 
group of users wherein group information from the remote repository is imported 
(figure 1, col. 5, lines 12-20, col. 6, lines 20-26, col. 7, lines 45-57). 

18. As to claim 14, Win teaches the invention as claimed, wherein the 
user information comprises at least one or user permissions, privileges and 
access rights associated with the user (abstract, col. 5, line 66-col. 6, line 17, col. 
8, lines 5-23, col. 1 1 , lines 42-64). 

19. As to claim 15, Win teaches the invention as claimed, including a 
non-transitory processor-readable medium comprising instructions for execution 



Application/Control Number: 09/883,300 Page 9 

Art Unit: 2453 

by a processor to integrate security and user account data in a reporting system 
witli at least one remote repository, tlie medium comprising: 

instructions for causing a processor to enable a user to submit user 
credential input to a reporting system (figure 1, col. 5, lines 12-20, col. 6, lines 
20-40 -receiving user registers/log-in to tlie system/central repository); 

instructions for causing a processor to identify an authentication process 
(figure 1, col. 6, lines 41 -col. 7, line 6) from a plurality of authentication process 
comprising a standard-mode authentication (fig. 5A, col. 9, lines 41-60), pass- 
through authentication (col. 6, line 10-col. 7, line 6, col. 12, line 10-53 -Registry 
server using Autlientication server module to autlienticate user via Registry 
Repository (i.e., database), and anonymous authentication (col. 8, line 5-col. 9, 
line 1 2 -Autlienticate and permit user to access to certain source based on user 
role); 

instructions for causing a processor to forward the user credential input to 
a first server (figures 1, 3, 5, col. 8, line 5-col. 10, line 33 -forwarding to access 
server 106 for authentication); and 

instructions for causing a processor to enable the first server to apply the 
authentication process to authenticate the user against a remote repository using 
Open Database Connectivity (ODBC) {i.e.. Register Repository) for verifying the 
user credential input (figures 1, 3, 5, col. 6, lines 41 -col. 7, line 67 -the access 
server 106 authenticates/verifies user name/password with Registry sever 108) 
and to determine user access control data for identifying at least one user 
privilege for performing one or more actions and at least one user permission 
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associated witli one or more objects (abstract, col. 5, line 66-col. 6, line 17, col. 
8, lines 5-23, col. 1 1 , lines 42-64 -providing user a personalized menu tliat 
displays only resources tliat user lias a riglit to access according to user's profile, 
including user's role and privileges), wherein the remote repository is located 
within a second server, the second server being different from the first server 
(figure 1 , col. 6, lines 20-26 and 41-54 - tlie registry repository 110 at tiie registry 
server 108 tliat stores user information, resources, users' role that can be used 
by access server 106 to authorize user's privileges and wherein the access 
server 106 and registry server 108 are different). 

However, Win does not explicitly teach wherein the reporting system 
comprises an On-Line Analytical Processing (OLAP) decision support system 
(DSS). 

Hellbusch teaches the reporting system comprises an On-Line Analytical 
Processing (OLAP) decision support system (DSS) (col. 5, lines 26-37). 

It would have been obvious to one of ordinary skill in the Data Processing 
art at the time of the invention was made to modify the teachings of Win to 
include OLAP decision support system as disclosed by Hellbusch in order to 
provide a useful architecture that interconnects applications of multiple 
enterprises into a single federated system. 

20. As to claim 16, Win teaches the invention as claimed, further 
comprising instructions for causing a processor to import user information from 
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the remote repository (figure 1, col. 5, lines 12-20, col. 6, lines 20-26, col. 7, lines 
45-57). 

21 . As to claim 17, Win teaches the invention as claimed, wherein the 
authentication process comprises at least one of Lightweight Directory Access 
Protocol and operating system authentication (col. 12, lines 10-53). 

22. As to claim 18, Win teaches the invention as claimed, further 
comprising instructions for causing a processor to enable the server to 
synchronize user account data with the user information from the remote 
repository (col. 7, lines 34-67, col. 19, line 50-col. 20, line 53). 

23. As to claim 19, Win teaches wherein the user is associated with a 
group of users wherein group information from the remote repository is imported 
(figure 1, col. 5, lines 12-20, col. 6, lines 20-26, col. 7, lines 45-57). 

24. As to claim 20, Win teaches the invention as claimed, wherein the 
user information comprises at least one or user permissions, privileges and 
access rights associated with the user (abstract, col. 5, line 66-col. 6, line 17, col. 
8, lines 5-23, col. 1 1 , lines 42-64). 

Conclusion 
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25. The prior art made of record and not relied upon is considered 
pertinent to applicant's disclosure (see PTO-892 attached). 

26. Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Thu Ha Nguyen, whose 
telephone number is (703) 305-7447. The examiner can normally be reached 
Monday through Friday from 8:00 AM to 6:00 PM. 

27. If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Krista Zele, can be reached at (571) 272-7288. 

Any inquiry of a general nature of relating to the status of this application 
should be directed to the Group receptionist whose telephone number is (703) 
305-9600. 

The fax phone numbers for the organization where this application or 
proceeding is assigned are 703-872-9306 for regular communications. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov . Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). 
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